secretfinder
SecretFinder is a python script based on LinkFinder (version for burpsuite here), written to discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc in JavaScript files. It does so by using jsbeautifier for python in combination with a fairly large regular expression.
Name:secretfinder
Category:Static Code Analysis
Publisher:trickest
Created:6/23/2021
Container:
quay.io/trickest/secretfinder:a0283cb
Output Type:
License:Unknown
Source:View Source
Parameters
-p
Set proxy (host:port)-c
Add cookies for authenticated JS files-H
Set headers (Name:Value
Name:Value)-i
Input a file-i
Input folder-i
Input a URL-r
RegEx for filtering purposes against found endpoint. (e.g: ^/api/)-n
Process js url, if it contain the provided string (string;string2..)-g
Ignore js url, if it contain the provided string (string;string2..)-e
Extract all javascript links located in a page and process it-b
Support burp exported file